49bcb0d5fc08451ef0e6d68041e3c571 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

49bcb0d5fc08451ef0e6d68041e3c571
Size

544KB
MD5

49bcb0d5fc08451ef0e6d68041e3c571
SHA1

dfdd716c84549bb73e5435589a52d08d6d997f15
SHA256

27904186f525bf6fb8b01915fd7592555643a9b545f12e4e8344c2fc004446f4
SHA512

8217be765fe686439729581990ea20596671db47f0eff1660d89e93949a80efb93aada30813007ac2b39f1b36de07efb6825675e8f00fa95324827c720fed841
SSDEEP

6144:Qvp0Q6ucy05UAEQYRyf3dhCkKotkjyXs+:QB0Qjcy05UABW0/CkKoej

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49bcb0d5fc08451ef0e6d68041e3c571

Files

49bcb0d5fc08451ef0e6d68041e3c571
.exe windows:4 windows x86 arch:x86

e59daa932f0469d4f36b673938ef52de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

MethCallEngine
ord628
ord596
ord598
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord644
ord100

Sections

.text
Size: 408KB - Virtual size: 406KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ